{ "opencollection": "1.0.0", "info": { "name": "Microsoft Graph Admin Admin.admin policies.unifiedRoleManagementPolicy API", "version": "1.0.0" }, "items": [ { "info": { "name": "policies.unifiedRoleManagementPolicy", "type": "folder" }, "items": [ { "info": { "name": "Microsoft Graph List roleManagementPolicies", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/policies/roleManagementPolicies", "params": [ { "name": "$top", "value": "50", "type": "query", "description": "Show only the first n items" }, { "name": "$skip", "value": "", "type": "query", "description": "Skip the first n items" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" }, { "name": "$count", "value": "", "type": "query", "description": "Include count of items" }, { "name": "$orderby", "value": "", "type": "query", "description": "Order items by property values" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Get the details of the policies in PIM that can be applied to Microsoft Entra roles or group membership or ownership. To retrieve policies that apply to Azure RBAC, use the Azure REST PIM API for role management policies." }, { "info": { "name": "Microsoft Graph Create new navigation property to roleManagementPolicies for policies", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/policies/roleManagementPolicies", "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Create new navigation property to roleManagementPolicies for policies" }, { "info": { "name": "Microsoft Graph Get unifiedRoleManagementPolicy", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/policies/roleManagementPolicies/:unifiedRoleManagementPolicy-id", "params": [ { "name": "unifiedRoleManagementPolicy-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicy" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Retrieve the details of a role management policy." }, { "info": { "name": "Microsoft Graph Update the navigation property roleManagementPolicies in policies", "type": "http" }, "http": { "method": "PATCH", "url": "https://graph.microsoft.com/v1.0/policies/roleManagementPolicies/:unifiedRoleManagementPolicy-id", "params": [ { "name": "unifiedRoleManagementPolicy-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicy" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Update the navigation property roleManagementPolicies in policies" }, { "info": { "name": "Microsoft Graph Delete navigation property roleManagementPolicies for policies", "type": "http" }, "http": { "method": "DELETE", "url": "https://graph.microsoft.com/v1.0/policies/roleManagementPolicies/:unifiedRoleManagementPolicy-id", "headers": [ { "name": "If-Match", "value": "" } ], "params": [ { "name": "unifiedRoleManagementPolicy-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicy" } ] }, "docs": "Microsoft Graph Delete navigation property roleManagementPolicies for policies" }, { "info": { "name": "Microsoft Graph Get effectiveRules from policies", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/policies/roleManagementPolicies/:unifiedRoleManagementPolicy-id/effectiveRules", "params": [ { "name": "unifiedRoleManagementPolicy-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicy" }, { "name": "$top", "value": "50", "type": "query", "description": "Show only the first n items" }, { "name": "$skip", "value": "", "type": "query", "description": "Skip the first n items" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" }, { "name": "$count", "value": "", "type": "query", "description": "Include count of items" }, { "name": "$orderby", "value": "", "type": "query", "description": "Order items by property values" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "The list of effective rules like approval rules and expiration rules evaluated based on inherited referenced rules. For example, if there is a tenant-wide policy to enforce enabling an approval rule, the effective rule will be to enable approval even if the policy has a rule to disable approval. Supports $expand." }, { "info": { "name": "Microsoft Graph Create new navigation property to effectiveRules for policies", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/policies/roleManagementPolicies/:unifiedRoleManagementPolicy-id/effectiveRules", "params": [ { "name": "unifiedRoleManagementPolicy-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicy" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Create new navigation property to effectiveRules for policies" }, { "info": { "name": "Microsoft Graph Get effectiveRules from policies", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/policies/roleManagementPolicies/:unifiedRoleManagementPolicy-id/effectiveRules/:unifiedRoleManagementPolicyRule-id", "params": [ { "name": "unifiedRoleManagementPolicy-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicy" }, { "name": "unifiedRoleManagementPolicyRule-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicyRule" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "The list of effective rules like approval rules and expiration rules evaluated based on inherited referenced rules. For example, if there is a tenant-wide policy to enforce enabling an approval rule, the effective rule will be to enable approval even if the policy has a rule to disable approval. Supports $expand." }, { "info": { "name": "Microsoft Graph Update the navigation property effectiveRules in policies", "type": "http" }, "http": { "method": "PATCH", "url": "https://graph.microsoft.com/v1.0/policies/roleManagementPolicies/:unifiedRoleManagementPolicy-id/effectiveRules/:unifiedRoleManagementPolicyRule-id", "params": [ { "name": "unifiedRoleManagementPolicy-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicy" }, { "name": "unifiedRoleManagementPolicyRule-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicyRule" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Update the navigation property effectiveRules in policies" }, { "info": { "name": "Microsoft Graph Delete navigation property effectiveRules for policies", "type": "http" }, "http": { "method": "DELETE", "url": "https://graph.microsoft.com/v1.0/policies/roleManagementPolicies/:unifiedRoleManagementPolicy-id/effectiveRules/:unifiedRoleManagementPolicyRule-id", "headers": [ { "name": "If-Match", "value": "" } ], "params": [ { "name": "unifiedRoleManagementPolicy-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicy" }, { "name": "unifiedRoleManagementPolicyRule-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicyRule" } ] }, "docs": "Microsoft Graph Delete navigation property effectiveRules for policies" }, { "info": { "name": "Microsoft Graph Get the number of the resource", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/policies/roleManagementPolicies/:unifiedRoleManagementPolicy-id/effectiveRules/$count", "params": [ { "name": "unifiedRoleManagementPolicy-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicy" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" } ] }, "docs": "Microsoft Graph Get the number of the resource" }, { "info": { "name": "Microsoft Graph List rules (for a role management policy)", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/policies/roleManagementPolicies/:unifiedRoleManagementPolicy-id/rules", "params": [ { "name": "unifiedRoleManagementPolicy-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicy" }, { "name": "$top", "value": "50", "type": "query", "description": "Show only the first n items" }, { "name": "$skip", "value": "", "type": "query", "description": "Skip the first n items" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" }, { "name": "$count", "value": "", "type": "query", "description": "Include count of items" }, { "name": "$orderby", "value": "", "type": "query", "description": "Order items by property values" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Get the rules or settings defined for a role management policy. The rules are a collection of following types that are derived from the unifiedRoleManagementPolicyRule object:" }, { "info": { "name": "Microsoft Graph Create new navigation property to rules for policies", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/policies/roleManagementPolicies/:unifiedRoleManagementPolicy-id/rules", "params": [ { "name": "unifiedRoleManagementPolicy-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicy" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Create new navigation property to rules for policies" }, { "info": { "name": "Microsoft Graph Get unifiedRoleManagementPolicyRule", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/policies/roleManagementPolicies/:unifiedRoleManagementPolicy-id/rules/:unifiedRoleManagementPolicyRule-id", "params": [ { "name": "unifiedRoleManagementPolicy-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicy" }, { "name": "unifiedRoleManagementPolicyRule-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicyRule" }, { "name": "$select", "value": "", "type": "query", "description": "Select properties to be returned" }, { "name": "$expand", "value": "", "type": "query", "description": "Expand related entities" } ] }, "docs": "Retrieve a rule or settings defined for a role management policy. The rule can be one of the following types that are derived from the unifiedRoleManagementPolicyRule object:" }, { "info": { "name": "Microsoft Graph Update unifiedRoleManagementPolicyRule", "type": "http" }, "http": { "method": "PATCH", "url": "https://graph.microsoft.com/v1.0/policies/roleManagementPolicies/:unifiedRoleManagementPolicy-id/rules/:unifiedRoleManagementPolicyRule-id", "params": [ { "name": "unifiedRoleManagementPolicy-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicy" }, { "name": "unifiedRoleManagementPolicyRule-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicyRule" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Update a rule defined for a role management policy. The rule can be one of the following types that are derived from the unifiedRoleManagementPolicyRule object: For more information about rules for Microsoft Entra roles and examples of updating rules, see the following articles:" }, { "info": { "name": "Microsoft Graph Delete navigation property rules for policies", "type": "http" }, "http": { "method": "DELETE", "url": "https://graph.microsoft.com/v1.0/policies/roleManagementPolicies/:unifiedRoleManagementPolicy-id/rules/:unifiedRoleManagementPolicyRule-id", "headers": [ { "name": "If-Match", "value": "" } ], "params": [ { "name": "unifiedRoleManagementPolicy-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicy" }, { "name": "unifiedRoleManagementPolicyRule-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicyRule" } ] }, "docs": "Microsoft Graph Delete navigation property rules for policies" }, { "info": { "name": "Microsoft Graph Get the number of the resource", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/policies/roleManagementPolicies/:unifiedRoleManagementPolicy-id/rules/$count", "params": [ { "name": "unifiedRoleManagementPolicy-id", "value": "", "type": "path", "description": "The unique identifier of unifiedRoleManagementPolicy" }, { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" } ] }, "docs": "Microsoft Graph Get the number of the resource" }, { "info": { "name": "Microsoft Graph Get the number of the resource", "type": "http" }, "http": { "method": "GET", "url": "https://graph.microsoft.com/v1.0/policies/roleManagementPolicies/$count", "params": [ { "name": "$search", "value": "", "type": "query", "description": "Search items by search phrases" }, { "name": "$filter", "value": "", "type": "query", "description": "Filter items by property values" } ] }, "docs": "Microsoft Graph Get the number of the resource" } ] } ], "bundled": true }